News Roundup

DrupalCamp Italy 2026 has extended its Call for Papers deadline to 31 July 2026. Organisers said some companies needed more time to submit proposals, while talks already received will move into review soon. The update gives Drupal speakers a longer proposal window before the in-person camp in Bologna on 22 October 2026.

Martin Anderson-Clutz has published an Acquia guide to the Drupal site templates marketplace. The post compares more than a dozen templates across nonprofit, healthcare, education, government, events, commercial, SaaS, and portfolio use cases. It advises teams to start with sector fit, then evaluate content architecture, design system approach, CSS stack, accessibility, support, and sandbox availability.

Drupal.org published ten contributed-project security advisories on 8 July 2026. The batch included three Critical unsupported-project advisories, a Critical SQL injection issue in Location Selector, and several active-project fixes involving cross-site scripting, cross-site request forgery, information disclosure, and access bypass. For Drupal site teams, the practical task is to remove unsupported projects, apply active-project updates, and review exposed input and rendering paths.

Drupal Pune Meetup is scheduled for 25 July 2026 at WPoets Technology LLP in Kalyani Nagar, Pune. The agenda includes coffee, networking, a session on modern multifactor authentication, a session on production AI agents, and a Birds of a Feather discussion on practical AI use. The meetup gives local Drupal practitioners a forum for technical learning, community exchange, and shared project experience.

Rector 2.5 adds Composer-based sets for Drupal. The feature lets Rector inspect a project’s installed Drupal version and dependencies, then choose matching refactoring rules automatically. The Drupal.org post connects the change to Drupal 12 readiness, Drupal Rector work, and improved automated deprecation coverage.

Red Hat’s Technically Speaking series published an episode on sovereign AI with Chris Wright and Jered Floyd on 1 July 2026. The discussion defines sovereignty through data, operational, technology, and assurance control, then applies those questions to black-box AI systems, open-weight models, and agentic workflows. The episode gives Drupal and open source readers a broader frame for thinking about vendor dependence, auditability, and control over AI-enabled platforms.

Block Content Explorer is a Drupal 11 contrib module for managing reusable and inline block content from a central admin page. It lists block content entities, shows reusable status and parent entity information, and supports filters for block type, reusable status, and published status. The module gives site builders and editors a clearer way to audit Layout Builder blocks without opening each layout individually.

Drupal Camp Asheville 2026 runs from 9 July to 12 July 2026 in Asheville, North Carolina, with trainings, conference sessions, and a Sunday community day. Speakers Chris O'Donnell, Dan Hansen, Will Jackson, and Matthew Saunders shared written responses with The DropTimes on storytelling for teams, Display Builder, Audit Export, and AI governance. Their sessions show how Drupal delivery depends on shared decision-making, site knowledge, layout consistency, and control over emerging AI workflows.

DrupalCon Orlando 2027 has opened volunteer applications for its Marketing & Outreach Committee and Photographer roles. The official volunteer page lists applications opening on 1 July 2026, closing on 5 August 2026, and notification on 10 August 2026 for both roles. The openings give Drupal community members an early opportunity to support conference outreach and documentation before the event, taking place from 22–25 March 2027 in Orlando, Florida.

Yii3 was released on 31 December 2025 with an architecture built around official packages, dependency injection, and PHP standards. Drupal 11 follows a different model, using Symfony components and content-focused APIs to support editorial and site-building workflows. For Drupal teams, the comparison is useful when a project combines structured content management with custom application services.

The Drupal Association has announced the candidates for its 2026 At-Large Board election. Eight community members are standing for one open board seat as Alejandro Moreno completes a two-year term. The election forms part of the association's staggered board renewal process.

Matthew Saunders has connected UN Open Source Week 2026 discussions on artificial intelligence to Drupal’s governance strengths in a Drupal.org post. He argues that AI systems need verified data, provenance, human review, open-source control, and structured workflows rather than models alone. For Drupal teams, the post frames content architecture, moderation, permissions, and revision history as useful foundations for accountable AI work.

LakeDrops author Jürgen Haas explains how the ECA Guide has been made readable for AI agents. The guide uses a public context server, an LLM index, Markdown pages, and an agent skill to expose ECA concepts, plugin references, token guidance, and examples. The setup gives Drupal teams a model for turning complex configuration documentation into usable support for AI-assisted workflow building.

DrupalCamp Spain 2026 has opened Early bird ticket sales for its November event in Madrid. The €60 ticket covers Friday and Saturday conference access, workshops, Thursday training, meals, and coffee breaks. The camp gives Drupal users, contributors, students, freelancers, and companies in Spain a scheduled community gathering before the end of 2026.

Google Open Source has published feedback from a GitHub Maintainer Month meetup on corporate support for open source maintainers. Maintainers pointed to predictable funding, conference access, communication norms, and clearer programme records as areas where companies can reduce friction. For Drupal, the discussion connects to sustaining membership, sponsored contribution, and AI-assisted contribution policy.

Dropsolid AI has launched a renewed brand and website focused on a sovereign Open Digital Experience Platform. The company says the platform brings content operations, trusted answers, knowledge navigation, personalisation, integrations, and infrastructure into a governed AI layer. For the Drupal community, the update matters because it places Drupal, Mautic, and open source within a broader enterprise AI and digital sovereignty message.

Colorado Drupal Meetups will host the Denver Drupal Meetup – AI Tools Show and Tell on 8 July 2026. The in-person session will run from 18:00 to 20:00 MDT at denhac in Denver and will focus on AI coding assistants, administrative automation, IDE extensions, and workflow tools. The meetup gives Drupal practitioners a local forum to compare practical AI use, ask questions, and learn from working examples.

Drupal Mastodon is a community-run Mastodon instance for Drupal-focused discussion on the Fediverse. It lets Drupal users follow project accounts, hashtags, and wider federated conversations from a Drupal-centred server. Its moderation, administrators, and Open Collective funding records make the infrastructure easier to evaluate before joining or contributing.

Schleswig-Holstein is advancing an open-source migration across core state administration systems. Official updates confirm LibreOffice adoption, the completed move to Open-Xchange and Thunderbird, licensing-cost savings of more than €15 million, and a new AI pilot called LLMoin. For the Drupal community, the case offers a public-sector example of how open-source policy can move from principle to operating infrastructure.

Drupal’s May 2026 core security advisory provides a practical case for examining governance around AI-generated code in production systems. Research from Miggo Security, Escape.tech, and Veracode points to faster exploit development and security weaknesses in generated applications and code samples. For Drupal teams, the lesson is that AI-assisted development still depends on secure architecture, patch readiness, and accountable maintenance.

This week’s events roundup covers open-source and Drupal community activity from 7 July 2026 to 14 July 2026. Featured events include an AI for Good workshop on generative AI pilots, a Drupal Zurich meetup on agentic CMS use cases, Drupal User Group Ruhr’s July session, and Drupal Camp Asheville 2026. The events span AI, Drupal development, community discussion, training, and regional networking.

ECA has crossed 20,000 reported Drupal site installations, according to Jürgen Haas and Drupal.org project data. The module lets site builders automate Drupal workflows using events, conditions, and actions instead of custom code. In a written response to The DropTimes, Jürgen said the number changes how he thinks about commits, API decisions, and compatibility promises.

Drupal Camp Asheville 2026 will feature sessions on accessible social media, Drupal Canvas-ready components, accessible AI workflows, and local development environments. AmyJune Hineline, Michael Anello, Carie Fisher, and Dan Gurin shared written responses with The DropTimes about their sessions and expected takeaways. The sessions place practical Drupal work alongside communication, inclusion, automation, and developer tooling.

DrupalCon Rotterdam will host two dedicated AI summits on 28 September 2026. The AI Dev Summit is aimed at developers, architects, and technical practitioners working with AI-powered Drupal tools and workflows. The Enterprise AI Summit is aimed at digital leaders and decision-makers focused on AI strategy, governance, security, compliance, and organisational adoption.

DrupalForge presents cloud templates for testing Drupal AI in browser-based environments. The templates cover AI-assisted content editing, translation, semantic search, retrieval-augmented generation, automators, agent workflows, and AI-assisted development. The approach gives teams a separate place to evaluate AI workflows while keeping provider keys, permissions, spending controls, data exposure, and human review under governance.

Talking Drupal episode 559 features Paul Johnson discussing marketing work around the Drupal AI Initiative. The conversation explains how the initiative is using case studies, events, webinars, demos, and search visibility to reach audiences outside existing Drupal channels. The episode also highlights Curated Colors, a Drupal module that gives editors approved visual palette choices instead of open-ended colour inputs.

CSS container style queries for custom properties have reached Baseline Newly Available support after Firefox 151 added the missing browser implementation. The feature lets CSS respond to custom-property values on a parent container, enabling some responsive and state-based component patterns without preprocessing. Mike Herchel argues that the change could simplify parts of Drupal front-end tooling once Drupal core can adopt it more broadly.

Mark Conroy has published his June 2026 LocalGov Drupal contribution update. The post covers work on Publications Importer, Microsites Base, Scarfolk, Waste Collection, Bus Data, microsite demo content, and Link Checker Per Node. It highlights maintenance tasks, coding standards cleanup, user-facing improvements, and release preparation.

UI Suite Monthly #36 reports updates to Display Builder Beta 5, Recipes, and the new Display Builder AI module. The recap describes revision handling, recipe-based starter sites, AI-assisted page assembly, maintenance work across UI Suite projects, and planned component-platform UX changes. For Drupal teams, the update indicates that Display Builder is moving toward broader testing through starter kits, component APIs, and experimental AI workflows.

Emma Horrell has published reflections from a Drupal In A Day session at The University of Edinburgh in early June 2026. The session introduced UX staff, interns, and other university participants to Drupal CMS, Views, content types, tagging, image handling, DDEV, Drupal Forge, and Drupal.org profiles. Participants described the format as useful for getting started, while some asked for more guided support with terminal commands and custom module development.

The Linux Foundation announced Akrites on 25 June 2026 as a coordinated effort to remediate and disclose vulnerabilities in critical open source software. The initiative proposes a shared Security Incident Response Team and a standardised Coordinated Vulnerability Disclosure process. Public reaction on Hacker News also touched on Drupal, but those comments should be treated as perception rather than evidence of project health.

Drupal Camp Asheville 2026 will include NEDCamp’s Saturday Night After-Party on 11 July 2026. The gathering runs from 18:15 to 20:15 EDT at Highland Brewing Company in Asheville, North Carolina. Attendees can RSVP for an evening with beverages, food trucks, live music, and community conversation.

Drupal Site Audit 1.0.11 adds Drupal 12 compatibility, expanded Drush reporting options, security hardening, and broader test coverage. The release supersedes 1.0.10, which supported Drupal 10.2 and Drupal 11. Drupal.org still marks the project as outside its security advisory policy.

Dries Buytaert has published an essay arguing that AI could reduce the privilege of free time in open-source contribution if access and skills are shared more widely. He says communities must address the cost of capable tools, teach contributors how to use them well, and make AI-assisted work easier for maintainers to trust. For Drupal, related work on AI best practices and shared evaluation infrastructure shows how the project could turn AI from a private advantage into shared contributor support.

Drupal 11.4.0 became available on 1 July 2026 as the fourth feature release of Drupal 11. The release reduces database queries, speeds recipe-based installation, improves translation handling, adds Brotli asset compression, and introduces an experimental native command line interface. It also changes the default site and administration experience, adds Gin as the experimental Default Admin theme, and confirms the week of 7 December 2026 plan for Drupal 12 and Drupal 11.5.

amazee.io and Fastly will host “Secure at Speed with Fastly - Edge Delivery Without Compromise” on 22 July 2026 at 22:00 UTC. The webinar will cover managed edge security, web application firewall and distributed denial-of-service protection, bot traffic handling, real-time logging, and OpenClaw-assisted log review. Speakers include Peter Scott, ANZ Channel Manager at Fastly, and Sean Hamlin, Principal Architect at amazee.io.

Irving Frias has introduced Drupal Watcher, a development-only Composer package for Drupal projects. The tool monitors custom modules and themes and maps file changes to targeted Drush cache-clear commands. Its documentation covers configuration, validation, multi-site support, a terminal user interface, and Composer installation with the development dependency flag.

In a Droptica blog post, Maciej Lukianski explains why text embedded in JPEG or PNG assets can weaken search, accessibility, and AI visibility. The article says these sections remove headings, links, crawlable copy, translation support, and editable content from the page. It recommends replacing flat graphics with structured Drupal components that use real headings, links, schema, and reusable content blocks.

Drupal 11.4.0 missed its planned week of 22 June 2026 UTC before becoming available on 1 July 2026. Drupal core release manager Nathaniel Catchpole linked the delay to recent core security releases and off-schedule patch releases caused by dependency security updates. A related core issue removed minor constraints from selected drupal/core-recommended dependencies so security and other updates can be applied without requiring a new Drupal core release.

The Drupal Security Team issued five moderately critical advisories on 1 July 2026 for Colorbox, FlowDrop, and Drupal Canvas. The vulnerabilities involve cross-site scripting, access bypass, and improper validation in uploaded files, session endpoints, and workflow approvals. The fixes update Colorbox, FlowDrop, and Drupal Canvas branches while reinforcing permission and validation checks around contributed-project features.

DrupalFit has published two ebooks for Drupal teams, one on performance debt and one on accessibility debt. The pages list topics including Core Web Vitals, caching, automated WCAG audits, continuous monitoring and remediation planning. Both resources are presented as gated downloads, and the public pages provide limited technical detail.

Jacob Rockowitz has published a LinkedIn post comparing AI tools to new team members who need repeated onboarding. He argues that Drupal teams should focus on documentation, roles, tests, specifications, and offboarding practices rather than overbuilding AI-specific processes. The post connects AI adoption with a broader opportunity to make Drupal contribution easier for both humans and AI-assisted workflows.

Martin Anderson-Clutz of Acquia has published a post on AI-assisted Drupal contrib maintenance through work on the Fullcalendar module. He describes support for Fullcalendar v7 and related work on themes, dark mode, MultiMonth display, AJAX loading, test coverage, settings reorganisation, Drupal 12 compatibility, and tooltip support. The post frames the work as a contrib-maintenance case, not a claim that AI replaces maintainer review.

Drupal Camp Asheville 2026 is seeking volunteers for its July event in Asheville, North Carolina. Roles include registration, session room support, speaker assistance, wayfinding, attendee questions, and event logistics. Volunteers can meet other community members and receive Drupal.org contribution credit.

Washington, DC, has launched a beta version of its redesigned DC.gov portal. The site runs on Drupal 11 and consolidates government service information across agencies. OCTO will collect resident feedback before full release, with AI-powered search planned after the official launch.